Malicious VSCode Setup Script Creation

Ibrahim Saud@tektrix

•updated Jun 17, 2026•1•0•5

Detects the creation or modification of a 'setup.mjs' file within a '.vscode' directory. This script can act as a local payload execution point when developers open infected projects, potentially leading to arbitrary code execution.